release/doc/en_US.ISO8859-1/relnotes/article.sgml

   1 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook V4.1-Based Extension//EN" [
   2 <!ENTITY % articles.ent PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Articles Entity Set//EN">
   3 %articles.ent;
   4
   5 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
   6 %release;
   7 ]>
   8
   9 <article>
  10   <articleinfo>
  11     <title>&os; &release.current; Release Notes</title>
  12
  13     <corpauthor>The &os; Project</corpauthor>
  14
  15     <pubdate>$FreeBSD$</pubdate>
  16
  17     <copyright>
  18       <year>2000</year>
  19       <year>2001</year>
  20       <year>2002</year>
  21       <year>2003</year>
  22       <year>2004</year>
  23       <year>2005</year>
  24       <year>2006</year>
  25       <year>2007</year>
  26       <year>2008</year>
  27       <year>2009</year>
  28       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
  29     </copyright>
  30
  31     <legalnotice id="trademarks" role="trademarks">
  32       &tm-attrib.freebsd;
  33       &tm-attrib.ibm;
  34       &tm-attrib.ieee;
  35       &tm-attrib.intel;
  36       &tm-attrib.microsoft;
  37       &tm-attrib.sparc;
  38       &tm-attrib.general;
  39     </legalnotice>
  40
  41     <abstract>
  42       <para>The release notes for &os; &release.current; contain a summary
  43         of the changes made to the &os; base system on the
  44         &release.branch; development line.
  45         This document lists applicable security advisories that were issued since
  46         the last release, as well as significant changes to the &os;
  47         kernel and userland.
  48         Some brief remarks on upgrading are also presented.</para>
  49     </abstract>
  50   </articleinfo>
  51
  52   <sect1 id="intro">
  53     <title>Introduction</title>
  54
  55     <para>This document contains the release notes for &os;
  56       &release.current;.  It
  57       describes recently added, changed, or deleted features of &os;.
  58       It also provides some notes on upgrading
  59       from previous versions of &os;.</para>
  60
  61 <![ %release.type.current [
  62
  63     <para>The &release.type; distribution to which these release notes
  64       apply represents the latest point along the &release.branch; development
  65       branch since &release.branch; was created.  Information regarding pre-built, binary
  66       &release.type; distributions along this branch
  67       can be found at <ulink url="&release.url;"></ulink>.</para>
  68
  69 ]]>
  70
  71 <![ %release.type.snapshot [
  72
  73     <para>The &release.type; distribution to which these release notes
  74       apply represents a point along the &release.branch; development
  75       branch between &release.prev; and the future &release.next;.
  76       Information regarding
  77       pre-built, binary &release.type; distributions along this branch
  78       can be found at <ulink url="&release.url;"></ulink>.</para>
  79
  80 ]]>
  81
  82 <![ %release.type.release [
  83
  84     <para>This distribution of &os; &release.current; is a
  85       &release.type; distribution.  It can be found at <ulink
  86       url="&release.url;"></ulink> or any of its mirrors.  More
  87       information on obtaining this (or other) &release.type;
  88       distributions of &os; can be found in the <ulink
  89       url="&url.books.handbook;/mirrors.html"><quote>Obtaining
  90       &os;</quote> appendix</ulink> to the <ulink
  91       url="&url.books.handbook;/">&os; Handbook</ulink>.</para>
  92
  93 ]]>
  94
  95     <para>All users are encouraged to consult the release errata before
  96       installing &os;.  The errata document is updated with
  97       <quote>late-breaking</quote> information discovered late in the
  98       release cycle or after the release.  Typically, it contains
  99       information on known bugs, security advisories, and corrections to
 100       documentation.  An up-to-date copy of the errata for &os;
 101       &release.current; can be found on the &os; Web site.</para>
 102   </sect1>
 103
 104   <sect1 id="new">
 105     <title>What's New</title>
 106
 107     <para>This section describes the most user-visible new or changed
 108       features in &os; since &release.prev;.</para>
 109
 110     <para>Typical release note items document recent security
 111       advisories issued after &release.prev;, new drivers or hardware
 112       support, new commands or options, major bug fixes, or
 113       contributed software upgrades.  They may also list changes to
 114       major ports/packages or release engineering practices.  Clearly
 115       the release notes cannot list every single change made to &os;
 116       between releases; this document focuses primarily on security
 117       advisories, user-visible changes, and major architectural
 118       improvements.</para>
 119
 120     <sect2 id="security">
 121       <title>Security Advisories</title>
 122
 123       <para>Problems described in the following security advisories have
 124         been fixed.  For more information, consult the individual
 125         advisories available from
 126         <ulink url="http://security.FreeBSD.org/"></ulink>.</para>
 127
 128       <informaltable frame="none" pgwide="0">
 129         <tgroup cols="3">
 130           <colspec colwidth="1*">
 131           <colspec colwidth="1*">
 132           <colspec colwidth="3*">
 133             <thead>
 134               <row>
 135                 <entry>Advisory</entry>
 136                 <entry>Date</entry>
 137                 <entry>Topic</entry>
 138               </row>
 139             </thead>
 140
 141             <tbody>
 142               <row>
 143                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:01.lukemftpd.asc"
 144                               >SA-09:01.lukemftpd</ulink></entry>
 145                 <entry>07&nbsp;January&nbsp;2009</entry>
 146                 <entry><para>Cross-site request forgery in
 147                   &man.lukemftpd.8;</para></entry>
 148               </row>
 149
 150               <row>
 151                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:02.openssl.asc"
 152                               >SA-09:02.openssl</ulink></entry>
 153                 <entry>07&nbsp;January&nbsp;2009</entry>
 154                 <entry><para>OpenSSL incorrectly checks for malformed
 155                   signatures</para></entry>
 156               </row>
 157
 158               <row>
 159                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:03.ntpd.asc"
 160                               >SA-09:03.ntpd</ulink></entry>
 161                 <entry>13&nbsp;January&nbsp;2009</entry>
 162                 <entry><para>ntpd cryptographic signature
 163                   bypass</para></entry>
 164               </row>
 165
 166               <row>
 167                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc"
 168                               >SA-09:04.bind</ulink></entry>
 169                 <entry>13&nbsp;January&nbsp;2009</entry>
 170                 <entry><para>BIND DNSSEC incorrect checks for
 171                   malformed signatures</para></entry>
 172               </row>
 173
 174               <row>
 175                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc"
 176                               >SA-09:05.telnetd</ulink></entry>
 177                 <entry>16&nbsp;February&nbsp;2009</entry>
 178                 <entry><para>telnetd code execution
 179                   vulnerability</para></entry>
 180               </row>
 181
 182               <row>
 183                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc"
 184                               >SA-09:06.ktimer</ulink></entry>
 185                 <entry>23&nbsp;March&nbsp;2009</entry>
 186                 <entry><para>Local privilege escalation</para></entry>
 187               </row>
 188
 189               <row>
 190                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc"
 191                               >SA-09:07.libc</ulink></entry>
 192                 <entry>04&nbsp;April&nbsp;2009</entry>
 193                 <entry><para>Information leak in &man.db.3;</para></entry>
 194               </row>
 195
 196               <row>
 197                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:08.openssl.asc"
 198                               >SA-09:08.openssl</ulink></entry>
 199                 <entry>22&nbsp;April&nbsp;2009</entry>
 200                 <entry><para>Remotely exploitable crash in
 201                   OpenSSL</para></entry>
 202               </row>
 203             </tbody>
 204         </tgroup>
 205       </informaltable>
 206     </sect2>
 207
 208     <sect2 id="kernel">
 209       <title>Kernel Changes</title>
 210
 211       <para>The &os; DTrace subsystem now supports a probe for
 212         process execution.</para>
 213
 214       <para arch="amd64">The &os; kernel virtual address space has
 215         been increased to 6GB and the ceiling on the kmem map size
 216         to 3.6GB.  Note that the ceiling as a fraction of the kernel
 217         map size rather than an absolute quantity.</para>
 218
 219       <sect3 id="boot">
 220         <title>Boot Loader Changes</title>
 221
 222         <para>The &man.boot.8; now supports 4-byte volume ID that
 223           certain versions of &windows; put into the MBR and invoking
 224           PXE by pressing F6 key on some supported BIOSes.</para>
 225
 226         <para>The &man.loader.8; is now able to obtain DHCP options
 227           via &man.kenv.2; variables in the case of network boot.</para>
 228
 229         <para>A bug in the &man.loader.8; has been fixed.  Now the
 230           following line works as expected:</para>
 231
 232         <programlisting>loader_conf_files="<replaceable>foo</replaceable> <replaceable>bar</replaceable> ${<replaceable>variable</replaceable>}"</programlisting>
 233       </sect3>
 234
 235       <sect3 id="proc">
 236         <title>Hardware Support</title>
 237
 238         <para>The &man.acpi.4; subsystem now supports a &man.sysctl.8;
 239           variable <varname>debug.batt.batt_sleep_ms</varname>.  On
 240           some laptops with smart batteries, enabling battery
 241           monitoring software causes keystrokes from &man.atkbd.4; to
 242           be lost.  This sysctl variable adds a delay in millisecond
 243           to the status checking code as a workaround.</para>
 244
 245         <para>The &man.cpuctl.4; driver, which provides a special
 246           device <filename>/dev/cpuctl</filename> as an interface to
 247           the system CPU and functionality to retrieve CPUID
 248           information, read/write machine specific registers (MSR) and
 249           perform CPU firmware updates.</para>
 250
 251         <sect4 id="mm">
 252           <title>Multimedia Support</title>
 253
 254           <para>The &man.agp.4; now supports Intel G4X series graphics
 255             chipsets.</para>
 256
 257           <para>The DRM, a kernel module named Direct Rendering
 258             Manager that gives direct hardware access to DRI clients,
 259             has been updated.  Support for AMD/ATI r500 and IGP based
 260             chips, XGI V3XE/V5/V8, and Intel i915 chipsets has been
 261             improved.</para>
 262
 263           <para>The snd_au88x0(4) driver for Aureal Vortex
 264             1/2/Advantage PCI has been removed because this was
 265             broken for a long time.</para>
 266
 267           <para>The &man.snd.hda.4; driver has been updated.  Changes
 268             include: multiple codec per HDA bus, multiple functional
 269             groups per codec, multiple audio devices per functional
 270             group, digital (SPDIF/HDMI) audio input/output,
 271             suspend/resume, and part of multichannel audio.</para>
 272
 273           <para>Note that due to added HDMI audio and logical audio
 274             devices support, updated driver often provides several PCM
 275             devices.  In some cases it can make system default audio
 276             device no longer corresponding to the users's habitual
 277             audio connectors.  In such cases the default device can be
 278             specified in audio application setup or defined globally
 279             via <varname>hw.snd.default_unit sysctl</varname>
 280             as described in the &man.sound.4; manual page.</para>
 281         </sect4>
 282
 283         <sect4 id="net-if">
 284           <title>Network Interface Support</title>
 285
 286           <para>The ciphy(4) driver now supports Vitesse VSC8211
 287             PHY.</para>
 288
 289           <para>A bug in &man.igb.4; driver which prevents a tunable
 290             <varname>hw.igb.ave_latency</varname> from working has
 291             been fixed.</para>
 292
 293           <para>The &man.jme.4; driver now supports newer JMicron
 294             JMC250/JMC260 revisions.</para>
 295
 296           <para>The &man.rl.4; driver has been improved.  A bug which
 297             prevents it from working on systems with more than 4GB
 298             memory has been fixed.</para>
 299         </sect4>
 300       </sect3>
 301
 302       <sect3 id="net-proto">
 303         <title>Network Protocols</title>
 304
 305         <para>The &man.jail.8; subsystem now supports start with a
 306           specific route FIB.</para>
 307
 308         <para>The &man.ng.netflow.4; Netgraph node now supports
 309           ability to generate egress netflow instead or in addition to
 310           ingress.  A <literal>NGM_NETFLOW_SETCONFIG</literal> control
 311           message has been added to control the new functionality.</para>
 312       </sect3>
 313
 314       <sect3 id="disks">
 315         <title>Disks and Storage</title>
 316
 317         <para>The &man.ata.4; driver now supports Marvell PATA M88SX6121.</para>
 318
 319         <para>An issue in the &man.gvinum.8; with access permissions
 320           to underlying disks used by a gvinum plex has been fixed.
 321           If the plex is a raid5 plex and is being written to, parity data might
 322           have to be read from the underlying disks, requiring them to be opened for
 323           reading as well as writing.</para>
 324
 325         <para>The &man.mmc.4; and &man.mmcsd.4; driver now support MMC
 326           and SDHC cards, high speed timing, wide bus, and multiblock
 327           transfers.</para>
 328
 329         <para>The &man.sdhci.4; driver has been added.  This supports
 330           PCI devices with class 8 and subclass 5 according to SD Host
 331           Controller Specification.</para>
 332
 333         <para>The &man.mmc.4; &man.mmcsd.4;, and &man.sdhci.4; driver
 334           are now included as a kernel module.</para>
 335       </sect3>
 336
 337       <sect3 id="fs">
 338         <title>File Systems</title>
 339
 340         <para></para>
 341       </sect3>
 342     </sect2>
 343
 344     <sect2 id="userland">
 345       <title>Userland Changes</title>
 346
 347       <para>The &man.config.8; utility now supports
 348         multiple <varname>makeoption</varname> lines.</para>
 349
 350       <para>The &man.du.1; utility now supports an <option>-l</option>
 351         flag.  When specified, the &man.du.1; counts a file with
 352         multiple hard links as multiple different files.</para>
 353
 354       <para>The &man.fetch.1; utility now supports an
 355         <option>-i</option> flag which supports If-Modified-Since HTTP
 356         request.</para>
 357
 358       <para>The &man.fsck.8; utility now supports a
 359         <option>-C</option> flag for catastrophic recovery mode, which
 360         will enable certain aggressive operations that can make
 361         &man.fsck.8; to survive with file systems that has very
 362         serious data damage, which is an useful last resort when on
 363         disk data damage is very serious and causes &man.fsck.8; to
 364         crash otherwise.</para>
 365
 366       <para>A bug in the &man.ipfw.8; utility which displays extra
 367         messages for a NAT rule even when a <option>-q</option> flag
 368         is specified.</para>
 369
 370       <para>A bug in the &man.netstat.1; utility has been fixed.  It
 371         crashed with the following options in the previous
 372         versions:</para>
 373
 374       <screen>&prompt.user; netstat -m -N foo</screen>
 375
 376       <para>The &man.powerd.8; program has been improved.  Changes
 377         include reasonable CPU load estimation on SMP systems and a
 378         new mode named as <literal>hiadaptive</literal> for AC-powered
 379         systems which rises frequency twice faster, drops it 4 times
 380         slower, prefers twice lower CPU load and has additional delay
 381         before leaving the highest frequency after the period of
 382         maximum load.</para>
 383
 384       <para>The &man.strndup.3; function has been added.</para>
 385
 386       <para>The &man.wc.1; utility now supports an <option>-L</option>
 387         flag to output the number of characters in the longest input
 388         line.</para>
 389
 390       <para>A bug in the &man.rpc.yppasswdd.8; program which leaves a
 391         zombie process when a password or default shell is changed has
 392         been fixed.</para>
 393
 394       <sect3 id="rc-scripts">
 395         <title><filename>/etc/rc.d</filename> Scripts</title>
 396
 397         <para></para>
 398       </sect3>
 399     </sect2>
 400
 401     <sect2 id="contrib">
 402       <title>Contributed Software</title>
 403
 404       <para><application>ISC BIND</application> has been updated to
 405         version 9.4.3-P2.</para>
 406
 407       <para>The timezone database has been updated from
 408         the <application>tzdata2008h</application> release to
 409         the <application>tzdata2009f</application> release.</para>
 410     </sect2>
 411
 412     <sect2 id="ports">
 413       <title>Ports/Packages Collection Infrastructure</title>
 414
 415       <para>A bug in the &man.pkg.create.1; which prevents the
 416         <option>-n</option> flag from working has been fixed.</para>
 417     </sect2>
 418
 419     <sect2 id="releng">
 420       <title>Release Engineering and Integration</title>
 421
 422       <para>The supported version of
 423         the <application>GNOME</application> desktop environment
 424         (<filename role="package">x11/gnome2</filename>) has been
 425         updated from 2.22 to 2.26.</para>
 426
 427       <para>The supported version of
 428         the <application>KDE</application> desktop environment has
 429         been updated from 3.5.10 (<filename
 430         role="package">x11/kde3</filename>) to 4.2.2 (<filename
 431         role="package">x11/kde4</filename>).</para>
 432     </sect2>
 433
 434     <sect2 id="doc">
 435       <title>Documentation</title>
 436
 437       <para></para>
 438     </sect2>
 439   </sect1>
 440
 441   <sect1 id="upgrade">
 442     <title>Upgrading from previous releases of &os;</title>
 443
 444     <para arch="amd64,i386">Beginning with &os; 6.2-RELEASE, binary
 445       upgrades between RELEASE versions (and snapshots of the various
 446       security branches) are supported using the
 447       &man.freebsd-update.8; utility.  The binary upgrade procedure
 448       will update unmodified userland utilities, as well as unmodified
 449       GENERIC or SMP kernels distributed as a part of an official &os;
 450       release.  The &man.freebsd-update.8; utility requires that the
 451       host being upgraded have Internet connectivity.</para>
 452
 453     <para>An older form of binary upgrade is supported through the
 454       <command>Upgrade</command> option from the main
 455       &man.sysinstall.8; menu on CDROM distribution media.  This type
 456       of binary upgrade may be useful on non-&arch.i386;,
 457       non-&arch.amd64; machines or on systems with no Internet
 458       connectivity.</para>
 459
 460     <para>Source-based upgrades (those based on recompiling the &os;
 461       base system from source code) from previous versions are
 462       supported, according to the instructions in
 463       <filename>/usr/src/UPDATING</filename>.</para>
 464
 465     <important>
 466       <para>Upgrading &os; should, of course, only be attempted after
 467         backing up <emphasis>all</emphasis> data and configuration
 468         files.</para>
 469     </important>
 470   </sect1>
 471 </article>